Skip to content
UtilityHub Logo
UtilityHub
Document Apache-2.0 ● Score: 59/100 Model Context Protocol (MCP)

Cve Mcp Server

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

Category: Document
Runtime: Python 3.10+
License: Apache-2.0
Source Repository ↗

At a Glance Technical Specifications

Protocol MCP / Stdio
Runtime Python 3.10+
Client Support Claude / Cursor
Execution Local Subprocess
License Apache-2.0
Popularity 59/100
Security Allowlist Scoped
Status Verified Clean
Visual setup and architecture guide for Cve Mcp Server

01 // How It Works & Runtime Architecture

By leveraging FastMCP, the application isolates runtime dependencies while maintaining low-latency execution traces across multi-step LLM operations.

Deterministic Execution Pipeline Local Stdio Protocol
AI Client (Claude / Cursor)
→
Cve Mcp Server Server
→
Scoped Local Tools
→
Sanitized Agent Memory

02 // Real-World Workflows & Use Cases

01

High-throughput parsing of complex documents (PDFs, Word docs, spreadsheets, presentations)

02

Structured table, key-value, and metadata extraction directly into agent memory buffers

03

Automated report generation and document synthesis from multi-source repositories

03 // Prerequisites & Compatibility

✓
Runtime Environment
Python 3.10+ installed and available in system PATH
✓
Compatible Client
Claude Desktop, Cursor, Windsurf, Claude Code CLI, or OpenCode
✓
Directory Permissions
Explicit filesystem read/write access to designated directories
✓
License Compliance
Verified permissive Apache-2.0 open-source license

04 // Client Configuration (claude_desktop_config.json)

{
  "mcpServers": {
    "cve-mcp-server": {
      "command": "python",
      "args": [
        "-m",
        "cve_mcp_server"
      ]
    }
  }
}

Paste into your client configuration file (e.g. ~/Library/Application Support/Claude/claude_desktop_config.json on macOS or %APPDATA%/Claude/claude_desktop_config.json on Windows).

05 // Step-by-Step Installation

Verified Process
  1. 1

    Clone mukul975/cve-mcp-server from GitHub

  2. 2

    Install dependencies with pip install -r requirements.txt (or uv sync)

  3. 3

    Copy .env.example to .env and add your API keys

  4. 4

    Run the skill server and connect your AI client via stdio or HTTP

06 // Execution Boundaries & Security Safeguards

● Context Protection

Keeps heavy parsing and raw file structures external to the LLM. Only sanitized excerpts and structured returns are injected into agent memory turns.

● Directory Allowlisting

Enforce explicit directory allowlists and permission scopes in client configuration to ensure autonomous tool calls never breach system boundaries.

● Process Isolation

Executes in an isolated local child process communicating strictly over JSON-RPC via stdio with explicit process timeouts.

07 // Frequently Asked Questions

FAQ Schema Included

What is Cve Mcp Server and how does it empower AI agents?

Cve Mcp Server is an open-source document capability designed for AI clients and autonomous agents. Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

How do I install and configure Cve Mcp Server?

Follow the step-by-step installation: 1) Verify your runtime (Python 3.10+), 2) Add the configuration snippet into your AI client settings (e.g. claude_desktop_config.json), 3) Restart the client to initialize tool execution.

Which AI clients and developer harnesses support Cve Mcp Server?

Cve Mcp Server is compatible with all AI tools supporting tool-calling and the Model Context Protocol (MCP), including Claude Desktop, Cursor, Claude Code CLI, Windsurf, OpenCode, and custom agent runtimes.

What security boundaries and sandboxing safeguards does Cve Mcp Server enforce?

Cve Mcp Server executes locally with strict directory allowlists and permission scopes. Heavy parsing and raw file structures stay external to the LLM context window to prevent memory saturation and unauthorized access.

Is Cve Mcp Server free and open source?

Yes, Cve Mcp Server is published under the Apache-2.0 open-source license. You can inspect the source code and contribute on GitHub at https://github.com/mukul975/cve-mcp-server.

Inspect Upstream Repository

Explore open-source implementation code, license, and community releases.

Related Document Capabilities View all →

Anthropic Document Skills (PDF, DOCX, PPTX, XLSX)

Anthropic's official Claude Skills for working with document formats — fill, merge, and extract data from PDFs, Word files, PowerPoint decks, and Excel spreadsheets inside agent workflows.

Document MIT
93

Markitdown

Python tool for converting files and office documents to Markdown.

Document MIT
89

Graphify

Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Cursor, Codex, and Gemini CLI: local deterministic AST parsing, every edge explained, no vector store.

Document Apache-2.0
87

AI Architecture Blueprints Using Similar Stacks Explore 360+ Blueprints →